The BBC wrote an application that could be added to facebook that steals your personal information, theres no way of knowing if other people with bad intent are using it and though facebook tries to stop it its simply impossible for them to catch everything.